Has anyone written a guide for using nostr in the browser while not messing up privacy? I've heard we should use alby to input our private key but #[0] said something about whitelisting sites that alby can see since it can see everything we do in the browser.